Amazon Exam ANS-C01 Topic 3 Question 32 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 32
Topic #: 3

A company has established connectivity between its on-premises data center in Paris, France, and the AWS Cloud by using an AWS Direct Connect connection. The company uses a transit VIF that connects the Direct Connect connection with a transit gateway that is hosted in the Europe (Paris) Region. The company hosts workloads in private subnets in several VPCs that are attached to the transit gateway.

The company recently acquired another corporation that hosts workloads on premises in an office building in Tokyo, Japan. The company needs to migrate the workloads from the Tokyo office to AWS. These workloads must have access to the company's existing workloads in Paris. The company also must establish connectivity between the Tokyo office building and the Paris data center.

In the Asia Pacific (Tokyo) Region, the company creates a new VPC with private subnets for migration of the workloads. The workload migration must be completed in 5 days. The workloads cannot be directly accessible from the internet.

Which set of steps should a network engineer take to meet these requirements?

A1. Create public subnets in the Tokyo VPC to migrate the workloads into.
2. Configure an internet gateway for the Tokyo office to reach the Tokyo VPC.
3. Configure security groups on the Tokyo workloads to only allow traffic from the Tokyo office and the Paris workloads.
4. Create peering connections between the Tokyo VPC and the Paris VPCs.
5. Configure a VPN connection between the Paris data center and the Tokyo office by using existing routers.

B1. Configure a transit gateway in the Asia Pacific (Tokyo) Region. Associate this transit gateway with the Tokyo VPC.
2. Create peering connections between the Tokyo transit gateway and the Paris transit gateway.
3. Set up a new Direct Connect connection from the Tokyo office to the Tokyo transit gateway.
4. Configure routing on both transit gateways to allow data to flow between sites and the VPCs.

C1. Configure a transit gateway in the Asia Pacific (Tokyo) Region. Associate this transit gateway with the Tokyo VPC.
2. Create peering connections between the Tokyo transit gateway and the Paris transit gateway.
3. Configure an AWS Site-to-Site VPN connection from the Tokyo office. Set the Tokyo transit gateway as the target.
4. Configure routing on both transit gateways to allow data to flow between sites and the VPCs.

D1. Configure an AWS Site-to-Site VPN connection from the Tokyo office to the Paris transit gateway.
2. Create an association between the Paris transit gateway and the Tokyo VPC.
3. Configure routing on the Paris transit gateway to allow data to flow between sites and the VPCs.

Show Suggested Answer

Suggested Answer: C

Option C is the best solution because it allows the company to use transit gateways to connect the VPCs in different regions and the on-premises sites. Transit gateways support inter-region peering and VPN attachments, which enable secure and scalable connectivity. Option A is not valid because public subnets are not suitable for workloads that cannot be directly accessible from the internet. Option B is not valid because Direct Connect connections take longer than 5 days to provision.

by Pok at Jul 17, 2024, 08:15 PM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Adelina

11 days ago

Option D is the way to go, just direct VPN from Tokyo to Paris. Who needs all those fancy transit gateways and peering connections? Keep it simple, my friends.

upvoted 0 times

...

Emmanuel

14 days ago

C is the way to go. Gotta love those transit gateways, they make life so much easier. Plus, the Site-to-Site VPN is a classic move - reliable and secure.

upvoted 0 times

...

Casandra

16 days ago

Haha, I'd just go with the 'wing it' approach. Set up a bunch of public subnets and open up the security groups. That's the fastest way to get it done, right?

upvoted 0 times

Merissa

4 days ago

upvoted 0 times

...

Sherrell

22 days ago

I'm not sure about that. Option B also seems like a valid solution, using Direct Connect from the Tokyo office to the transit gateway. That might be a bit faster to set up.

upvoted 0 times

...

Margart

26 days ago

I think C is the best option because it involves setting up a transit gateway in Tokyo and using an AWS Site-to-Site VPN connection for connectivity.

upvoted 0 times

...

Kenny

1 months ago

The correct answer is definitely C. Setting up a transit gateway in the Tokyo region and using a Site-to-Site VPN connection is the most efficient way to establish connectivity between the offices while keeping the workloads isolated from the internet.

upvoted 0 times